Google · Google Chrome · CVE-2022-1500
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 101.0.4951.41
Microsoft Edge (affected versions not specified)
**Description**
The issue is related to insufficient data validation in Dev Tools, which can be exploited by a remote attacker to bypass content security policy. This can be achieved via a crafted HTML page. The vulnerability may allow an attacker to disclose protected information.
**Recommendations**
For Google Chrome versions prior to 101.0.4951.41, update to version 101.0.4951.41 or later to resolve the issue.
For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.